commit e46c6d0c33190ecdd132bfcbc6fcc910c42a3ac1
author Roman Kiryanov <rkir@google.com> Fri Sep 28 15:53:03 2018 -0700
committer Roman Kiryanov <rkir@google.com> Fri Sep 28 15:53:03 2018 -0700
tree 0f1e2cc8b036215c42412fc94be144edf5c856ed
parent 945d58f021248508763f5d1c90ad35b5a6c0584e

Fix sepolicy for healthd

This change fixes
avc: denied { wake_alarm } for comm="healthd" capability=35 scontext=u:r:healthd:s0 tcontext=u:r:healthd:s0 tclass=capability2 permissive=1

Bug: 116663979
Test: run emulator
Change-Id: Ibe867f08b77e9934cbab02199320138d138042fb
Signed-off-by: Roman Kiryanov <rkir@google.com>

sepolicy/x86/healthd.te

diff --git a/sepolicy/x86/healthd.te b/sepolicy/x86/healthd.te
index 95fa807..6efedfb 100644
--- a/sepolicy/x86/healthd.te
+++ b/sepolicy/x86/healthd.te
@@ -1 +1,2 @@
 allow healthd self:capability sys_nice;
+allow healthd self:global_capability2_class_set wake_alarm;